Filter
Top Products
AAA Commands 241
Command Mode
Global Configuration mode
User Guidelines
Only one authentication method may be specified in the command. For the
RADIUS authentication method, if the RADIUS server cannot be contacted,
the supplicant fails authentication. The none method always allows access.
the ias method utilizes the internal authentication server. The internal
authentication server only supports the EAP-MD5 method.
Example
The following example configures 802.1x authentication to use no
authentication. Absent any other configuration, this command allows all
802.1x users to pass traffic through the switch.
console(config)# aaa authentication dot1x default
none
The following example configures 802.1x authentication to use a RADIUS
server. A RADIUS server must be configured using the radius-server host auth
command for the radius method to succeed.
console(config)#aaa authentication dot1x default
radius
aaa authentication enable
Use the aaa authentication enable command in Global Configuration mode
to set authentication for accessing higher privilege levels. To return to the
default configuration, use the no form of this command.
Syntax
aaa authentication enable {default |
list-name
}
method1
[
method2
...]
no aaa authentication enable {default |
list-name
}
•
default
— Uses the listed authentication methods that follow this
argument as the default list of methods, when using higher privilege levels.
2CSPC4.X8100-SWUM102.book Page 241 Friday, March 15, 2013 8:56 AM